Created on 09-29-2016 03:24 AM Edited on 03-30-2022 05:29 AM By Anonymous
Description
If you are not seeing current events on the Super, you can check if there are any cached events files waiting to be uploaded on the Collector.
1. ssh to the collector as root
2. run “cd /opt/phoenix/cache/parser/events”
3. Run “ls | wc –c” to see how many event files need to be uploaded.
4. run "ls -lt" to see the oldest date for cached events file
N/A
All
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.